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Appl. No. 10/531,753 

Amdt Dated June 1, 2009 

Reply to Office action of March 31. 2009 

Attorney Docket No. P1 7299-US1 

EUS/GJ/P/09-1127 

REMARKS/ARGUMENTS 
1.) Claim Rejections - 35 U.S.C. §1 03(a) 

The Examiner rejected claims 13-16 and 18-21 as being unpatentable over 
Sitaraman, et al. (U.S. Patent No. 6,427,170) in view of Alkhatib, et al. (U.S. Patent 
Publication No. 2004/0044778) and Lim, et at. (U.S. Patent No. 5884024); and claims 
17 and 22 as being unpatentable over Sitaraman in view of Alkhatib and Taylor, et al. 
(U.S. Patent Publication No. 2002/0065919). The Applicants traverse the rejections. 

In the prior office action, the Examiner rejected claim 13-16 and 18-21 as being 
unpatentable over Sitaraman in view of Alkhatib, and claims 17 and 22 as being 
unpatentable over Sitaraman in view of Alkhatib and Taylor. In the present office action, 
the Examiner has merely added the teachings of Lim to his stated basis of rejection of 
claims 13-16 and 18-21, but has not modified the basis of rejection of claims 17 and 22, 
even though those claims are dependent from claims 13 and 18, respectively. The 
Applicants will treat the Examiner's rejection of claims 17 and 22 as though they were 
rejected as being unpatentable over Sitaraman in view of Alkhatib, Urn and Taylor. 

For completeness herein, the Applicants will repeat their previously-submitted 
arguments which specifically distinguished claim 13 over the teachings of Sitaraman 
and Alkhatib, with added comments to point out where the Examiner has failed to 
address the points of those arguments and failed to establish how the teachings of Lim 
overcome the deficiencies identified by Applicants in the teachings of Sitaraman and 
Alkhatib. 

The Applicants' invention is directed to preventing the illegitmate use of an Internet 
Protocol (IP) address in an IP network, commonly referred to as -spoofing." The novel 
method includes providing a filter in a switch node through, which a subscriber device 
accesses the IP network. The switch node maintains a list of trusted DHCP servers which 
are conventionally used to assign an IP address to subscriber devices. When the switch 
node receives a DHCP request for an IP address from a subscriber device, the switch 
node examines the reply message that carnies the assigned subscriber IP address and 
analyzes it to confirm it has a source address from one of the trusted DHCP servers. The 
switch node then dynamically updates the filter and stores an indentation of the 
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subscriber device and the assigned IP address. Subsequently, when the subscriber device 
transmits a frame using a source IP address, the switch node confirms in the filter that the 
source IP address of the frame matches the stored subscriber IP address and, if not, the 
switch node discards the frame. That combinatio n of function* i s not tauoht or 
suggested by the teachings of Sitaraman, Aikhn«h a „d Um , eitner j nd | v ,d. lfl „ Y nr in 
combination . 

With respect to the claim limitation "creating a list of trusted ones of the DHCP 
servers in said switch node," the Examiner again refers generally to Sitaraman as 
disclosing, in Figure 2, "multiple DHCP servers." The Examiner, fjov^yer, does not point to 
any teaching in Sitaraman. or Alkhat ib. of creating a list of trusted ones of the DHCP 
servers, or the storing such a list in the s witch node through which g subscriber device 
accesses the IP network . Moreover, the E xaminer has not pointed to any teaching in 
Lim of that claim limitation. 

With respect to the claim limitation "analysing the reply message [by said switch 
node] to be a DHCP message and having a source address from one of the trusted DHCP 
servers," the Examiner states that Sitaraman teaches a client that may decide to "accept 
[an offered IP address] or wait for additional offers from other DHCP servers on the 
network." That claim limitation now recites that the function is performed in the switch node 
and not the subscriber device {i.e., the client). In either case, the Examiner does not point 
to any teaching in Sitaraman of analyzin g a DHCP re p ly message to ensure that its sourr** 
address is from a trusted one of the D HCP servers maintained in a list bv the switch nrvte 
Similarly, if Sitaraman does not teac h creating a fitter list of frusted DHCP servers in a 
switch node, nor analyzing a reply ma s sage to be a DHCP message having a source 
address from one of the trusted DHCP se r vers, it cannot logically teach the claim limitation 
of "updating a filter dynamically in the swi t ch node, the fitter storing an identification of the 
subscriber device and the assigned sub s criber IP addreess." which the Examiner asserts 
is taught at column 10. lines gZ-31 The Applicants have examined the referenced portion 
of Sitaraman and find no such teaching. Moreover, the Examiner has not pointed to 
artv teachi ng m Lim of that claim limitation 
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With respect to the claim limitation "comparing in the fir tor said source |p addre 
with the stored subscriber IF* addrees," the Examiner states that srta 
"'dynamic' IF* addressee are compared with static IF* address< 
lines 1 0- 1 . The claim limitation, however, read 
comparing a source i F* address of a frame from 



men teaches 
referring to column 
the context of the whole claim. Is 
subscriber device with a previously- 



stored IF* address assigned to the subscriber device, in order to ensure the subscriber 
device Is not "spoofing" an IF> address not assigned to the device. Thus, the claim 
limitation Is not cgrnparinq a dynamic IF* add ress to a static IF* ar1rtros 3 as the Examiner 



yyer., the ^xomlner Ha<s not pointed to any 



reads the teachings of Sitaraman. IWlor 
teaching In Llm of that claim limitation. 

The Examiner does recognize that Sitaraman fails to teach discarding a frame from 
a subscriber device when Its source IF> address differs from the stored subscriber IF* 
address. "The mere fact that the Examiner recognizes this deficiency In the teaching of 
Sitaraman should, as a logical matter, counter against hie assertion that Sitaraman 
teaches the claim limitation of "comparing in the filter said source IF* address with the 
stored subscriber IF* address." The logical purpose of such comparison is to determine 
whether or not such addresses are the same and. thus, if they are not. the frame should 
be discarded — the very function which the Examiner recognizees Sitaraman falls to teach. 
In either case, the Examiner looks to the teachings of Alkhatib to overcome the 
acknowledged deficiency. Alkhatib. however, fails to teach discarding, bv a switch noria a 
fra, m e transmitted tyy a ^yb^oriber o;ovrice when the source IF* address for the frame 
does not CQrrospond to a prevlouslv^stored IF* flddjgsg assigned to the subscriber device . 
~ rhie! Examiner points to paragraph 1<<*9 of Alkhatib as teaching this single limitation of claim 
13. According to the teachings of Alkhatib, entltos 14, 16 and 1© are devices such as 
•mobile and non-mobile computing devices.*' which correspond to the "subscriber device" 
as used in claim 13. and those devices are connected to an IF* network through a Network 
Address Translation (NAT) device 12. (see Figure 1). Alkhatib is directed to a system for 
accessing tan entity inside a private network. According to the teachings of paragraph 1-*9. 
"PJf IMAT 12 checks the source IF* address in inaoi-rHna packets, rejecting those in which the 
source IF* address is different than the destination IF* address for which the connection was 
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established In the first place." The purpose of that function in Alkhatib is to control access 
to the devices 14, 1© and 18 //j the private network behind the NAT 12. not to ensure that 
source IF* address utilized by such devices matches an IF* address previously-assigned to 
such devices. Therefore, the ^miner's reliance on the teachings of Alkhatib i~ inannoslto 
and fa|| g to cura the deficiencies In the teachings of Sitaraman Moreover, the Examiner 
has nQ * pointed «o amy te«ctilng In t-lm of thot claim limitation. 

Accordingly, the Examiner has not established a /anrna Sac/e case of obvlosuness of 
claim 13 in view of Sitaraman. Alkhatib and Urn. Whereas Independent claim 18 recites 
limitations analogous to those of claim 13, It Is also not obvious over Sitaraman In view of 
Alkhatib. Furthermore, whereas claims 1-4--1 7 and 19-22 are dependent from claims 13 
and 18. respectively, and Include the limitations thereof, they are also not obvious in view 
of those references. 

S£gM£LU§iQfci 

In view of the foregoing remarks, the Applicants believe all of the at&im^ currently 
pending In the Application to be in a condition for allowance. The Applicants, therefore, 
respectfully request that the ^xstmin&r withdraw all rejections and Issue a Klotlco of 
Allowance for claims 13-22. 

Th^» Applicant? request a telephonic interview If the Examiner has any questions 
or requires any additional Information that would further or expedite the prosecution of 
the Application. 

Respectfully submitted. 

Rogdrs. Burleigh 
Registration Mo. 40,542 

Oate: June 1. 2QQ9 
Ericsson Inc. 

©300 Legacy Drive, FVT/S. EVR 1-0-11 
Piano. Texas 75024 
(972) 583-5799 

roger.burlergri@erlcsson.com 
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